CVE-2023-20569: A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution…

medium4.7CVSS 3.1

AVLACHPRLUINSUCHINAN

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.

Affected

205 ranges· showing 25

Vendor	Product	Version range	Fixed in
amd	1st_gen_amd_epyc_processors	—	—
amd	2nd_gen_amd_epyc_processors	—	—
amd	3rd_gen_amd_epyc_processors	—	—
amd	4th_gen_amd_epyc_processors	—	—
amd	athlon_3000_series_mobile_processors_with_radeon_graphics	—	—
amd	athlon_3000_series_processors_with_radeon_graphics	—	—
amd	athlon_pro_3000_series_processors_with_radeon_vega_graphics	—	—
amd	epyc_72f3_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7313_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7313p_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7343_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7373x_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_73f3_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7413_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7443_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7443p_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7453_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7473x_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_74f3_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7513_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7543_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7543p_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7573x_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_75f3_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c
amd	epyc_7643_firmware	< milanpi_1.0.0.c	milanpi_1.0.0.c

CVSS provenance

nvdv3.14.7MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

osv7.0HIGH